These two events have nothing to do with each other.
The Samsung event, which has already been discussed in the forum, was discovered by a white hat hacker and had to do with a development github repository which had remained public. It wasn’t even secured. There was no ransom involved: the white hat hacker reported it appropriately first to Samsung and then 30 days later to the press as is current best practice.
Also note that the Samsung code was only for the mobile apps. Not the cloud platform or the hub.
The ransom issue is completely separate, just happened this week, and involves a black hat hacker having grabbed credentials for a bunch of SECURED github repositories And threatening to make that code public if a ransom is not paid.
Nothing to do with Samsung or its practices. It’s almost the opposite, since Samsung didn’t bother to secure their github in the first place.
Please correct your first post. Samsung was not a victim of the ransom attack.